NiuShop open source mall system Goods.php page with SQL injection vulnerability (CNVD-2017-36959)

NiuShop open source mall system is by Shanxi Niu Cool Information Technology Co., Ltd. completely independent design, research and development of a set of PHP open source e-commerce system . NiuShop open source mall system Goods.php page SQL injection vulnerability , attackers can exploit the...

Piwigo SQL Injection Vulnerability

Piwigo is a free and open source web photo album software. A SQL injection vulnerability exists in Piwigo 2.9.2 and prior versions. A remote authenticated attacker can exploit the vulnerability to obtain information in the context of a user that the application uses to retrieve data from a databa...

Movable Type plugin A-Member and A-Reserve vulnerable to SQL injection

Overview A-Member and A-Reserve provided by ARK-Web co., ltd. are plugins for Movable Type which provide functions to build a membership website or a reservation website. A-Member and A-Reserve contain SQL injection CWE-89 vulnerability due to the issue in processing cookie values. Yuuta Watanabe...

SQL Injection Vulnerability in phpaaCMS v0.5 admin/friendlink.add.php Page

phpaaCMS is a simple article management system. A SQL injection vulnerability exists in the admin/friendlink.add.php page of phpaaCMS v0.5, which can be exploited by attackers to obtain sensitive information from the database...

Fastspot BigTree CMS SQL Injection Vulnerability (CNVD-2017-35446)

Fastspot BigTree CMS is the United States Fastspot company based on PHP and MySQL open source content management system CMS. A SQL injection vulnerability exists in the core/inc/auto-modules.php file in Fastspot BigTree CMS 4.2.19 and earlier versions. A remote attacker can exploit the...

CVE-2017-16955

SQL injection vulnerability in the InLinks plugin through 1.1 for WordPress allows authenticated users to execute arbitrary SQL commands via the "keyword" parameter to /wp-admin/options-general.php?page=inlinks/inlinks.php...

CVE-2017-8198

FusionSphere V100R006C00SPC102NFV has an SQL injection vulnerability. An authenticated, remote attacker could craft interface messages carrying malicious SQL statements and send them to a target device. Successful exploit could allow the attacker to launch an SQL injection attack and execute SQL...

SQL injection vulnerability in program\form\receive\data_add.php page of Dreamline Monxin enterprise station builder system

Monxin Enterprise Station Building System is a self-service station building system based on PHP language development. A SQL injection vulnerability exists in the program\form\receive\dataadd.php page of the Monxin Enterprise Station Building System. The vulnerability is due to the system failing...

DEBIAN-CVE-2017-16896

A SQL injection in classes/handler/public.php in the forgotpass component of Tiny Tiny RSS 17.4 exists via the login parameter...

EasySNS Minimalist Community groupinfo method, commentadd_callback method suffer from SQL injection vulnerability

EasySNS Minimalist Community is for the new database architecture and program structure, to the group as the basic unit to form an interactive community. A SQL injection vulnerability exists in the groupinfo and commentaddcallback methods of EasySNS Minimalist Community. The vulnerability is due ...

SQL Injection Vulnerability in ShowNews.asp Page of Zhongkai Information Website Building System

Zhongkai Information Network Co., Ltd. is to provide a full range of one-stop e-commerce solutions for traditional and emerging enterprises. A SQL injection vulnerability exists in the ShowNews.asp page of CKI's website builder system. The vulnerability is caused due to the system's failure to...

SQL Injection Vulnerability in E-Tech Website Construction System of Yanji Pilot High-Tech Development Co.

Yanji Pioneer Hi-Tech Development Co., Ltd. is a modernized company of computer software, hardware development and network service, electronic technology application and development. Now it has developed "E-technology website construction software", "E-technology e-commerce", "E-technology office...

SQL injection vulnerability in EML enterprise address book management system action.address.php file

EML enterprise customer relationship management system is based on Linux open kernel and Apache based Php + Mysql intelligent B / S interactive service system. A SQL injection vulnerability exists in the EML Enterprise Contacts Management System action.address.php file. An attacker can exploit th...

VIM SQL Injection Vulnerability

VIM is an open source, configurable text editor for creating and changing any type of text, which can be used on most UNIX systems and Apple OS X. It can be used on most UNIX systems. A SQL injection vulnerability exists in VIM. A remote attacker can exploit this vulnerability by sending the...

SQL Injection Vulnerability in category.php of Ubiquitous 365 Website Category Navigation System

Uc365 website classification and navigation system is a cross-platform open source software , based on PHP + MYSQL development and construction of open source website classification and catalog management system . Uke365 website category navigation system category.php SQL injection vulnerability...

Dynamic News Magazine&Blog CMS SQL Injection Vulnerability

Dynamic News Magazine&Blog CMS is a content management system mainly used for information websites. A SQL injection vulnerability exists in Dynamic News Magazine&Blog CMS version 1.0. A remote attacker can inject SQL commands by sending the 'id' parameter to the admin/adminprocess.php file...

ZOHO ManageEngine Applications Manager SQL Injection Vulnerability (CNVD-2017-35598)

ZOHO ManageEngine Applications Manager is a set of IT operations management solutions from ZOHO. A SQL injection vulnerability exists in Zoho ManageEngine Applications Manager version 13. A remote attacker can exploit this vulnerability by executing arbitrary SQL commands with the 'name' paramete...

EyesOfNetwork web interface 'host' parameter SQL injection vulnerability

EyesOfNetwork EON is an open source, free IT monitoring solution. The solution provides features such as a business process configuration tool, generating pop-up windows when events occur in the active queue, and more. The EyesOfNetwork web interface aka eonweb is one of these web interfaces...

Xavier PHP Management Panel SQL Injection Vulnerability

Xavier PHP Management Panel is a PHP-based web content protection script. A SQL injection vulnerability exists in Xavier PHP Management Panel version 2.4. A remote attacker can inject malicious SQL commands into the admin/adminuseredit.php file by sending the 'usertoedit' parameter or the...

Multiple vulnerabilities in IdeaCMS v2.1.0 plug/user/index.asp page

IdeaCMS website management system is by the three skin network technology limited company the original day side of the network based on the Asp + Access/Mssql environment to develop a rapid station-building system. IdeaCMS v2.1.0 plug/user/index.asp page parallel override, logical design and SQL...